● Writing

Notes from the trust boundary

Essays on giving AI agents safe, semantic access to a real database — the design decisions, the refusals, and the things that broke.

AI agentsPostgresMCP

Why I built SchemaBrain

I didn’t want to give an AI agent raw SQL access to production Postgres — so I built a different boundary. One that compiles intent to safe SQL, refuses PII before the query runs, and keeps a tamper-evident audit.

Jun 20, 2026·6 min read